Change Android SafetyNet attestation type identifier ?

[equalsJeffH]

Android SafetyNet attestation type identifier is presently given as:
Android Attestation (type="android")
However, Android N adds another form of "hardware attestation" for which we will have to allocate another attestation type identifier.

1. Do we leave the SafetyNet attestation type identifier as "android" and, e.g., define the new so-called "android N hardware attestation" type identifier as "android2" ?
2. Or redefine SafetyNet attestation type identifier as say "AndroidSafetyNet" and the new so-called "android N hardware attestation" type identifier as say "AndroidN" ?

Personally, I think I'd go with (1) at this point. And if for some reason yet another attestation signature format emerges from Android, it can just be labeled "android3".

[rlin1]

I propose to replace the existing SafetyNet with Android "N" attestation, since in Android "N", the (1) attestation is computed by the Authenticator and (2) the the authenticator includes the public key.
In SafetyNet, the App provides a public key to be included and the attestation is computed by the platform.

[equalsJeffH]

the GOOG folk likely should weigh-in on Rolf's suggestions re "replace the existing SafetyNet with Android "N" attestation".

also, I note that the original issue raises the meta-question of what is the syntax and semantics of attestation format identifiers.